 |
 |
A description of the processing of personal data (privacy notice; Articles 13, 14 and 30 of Regulation (EU) 2016/679)
Personal data processed in the survey,Compliance and Ethics Europe - CEE 2022
The goal of this survey is to gather data on the ethics of different European organisations and what kind of connections there are between the ethical solutions and practices and the wellbeing of personnel.
The following personal data will be collected from you: email address, phone number, employer, position, age, sex, country of work, survey responses.
This privacy notice has been published on the survey website and respondents have been given a direct link to this information on the survey form.
Legal grounds for the processing of personal data for research/archiving purposes
☒ Processing is necessary for scientific or historical research purposes or statistical purposes, and it is correctly proportional in relation to the goal in accordance with public interest (section 4.1(3) of the Finnish data protection act)
☒ In addition, specific consent is asked with regard to repeat studies and marketing (Article 6.1(a), GDPR)
Transferring personal data outside the EU/EEA
During this study, your personal data will not be transferred outside the EU/EEA.
Protection of personal data
In this study, the processing of personal data is based on a proper plan, and a responsible person has been appointed. Your personal data will only be used and disclosed for purposes of conducting historical or scientific research or for other similar purposes (statistics), and it is otherwise ensured that no data about you is disclosed to unauthorised parties.
Only with specific consent to repeat studies and marketing, may personal data be used for such purposes.
Prevention of identifiability
☒ Direct identification data will be removed as a protective measure when generating the data (pseudonymised data, in which case persons can be later identified on the basis of a code or similar data, and new data can be merged with the data)
Only with specific consent to repeat studies and marketing, may personal data be used for such purposes. In such a case, personal data and survey responses will be handled separately.
Personal data used in the study will be protected by means of
☒ username ☒ password
The processing of personal data after the study
☒ The research register will be archived with identification data
The data will be archived with identification data for the purposes of repeat studies:
☒ Based on public interest. The processing of research data containing personal data for archiving purposes is necessary to fulfil the goal set for public interest (section 4.4 of the data protection act)
More information about the duration and location of archiving:
The head of this survey will be responsible for archiving the data. It will be archived in Juuriharja Consulting Group Ltd’s electronic archive in Dropbox, separated by username and password from other data.
Controller(s) and researchers
The controller is Juuriharja Consulting Group Ltd.
Person in charge of the survey: Erika Heiskanen, +358 40 7466798, erika.heiskanen@juuriharja.fi, Runeberginkatu 61, 00250 Helsinki, Finland.
Researchers: Information on researchers can be attained from the person in charge of the survey.
Processors:
The survey data or parts of it can be shared with European universities for scientific purposes and processed by them. In addition, data with marketing permission can be shared with partners in countries where respondents are working. For further information please contact the person in charge of the survey.
Rights of data subjects
Withdrawal of consent (Article 7, GDPR), where applies
You have the right to withdraw your consent if the processing of personal data is based on consent. Withdrawing consent does not have any impact on the lawfulness of processing based on consent carried out before the withdrawal.
Right to access data (Article 15, GDPR)
You have the right to obtain information about whether your personal data is processed, and which personal data is processed. If required, you can request a copy of the personal data processed.
Right to have data rectified (Article 16, GDPR)
If there are any inaccuracies or errors in the processing of your personal data, you have the right to request your personal data to be rectified or supplemented.
Right to have data erased (Article 17, GDPR)
You have the right to request your personal data to be erased in certain situations. However, the right to have data erased does not exist if the erasure prevents the purpose of processing from being fulfilled for scientific research purposes or makes it much more difficult.
Right to the restriction of processing (Article 18, GDPR)
You have the right to restrict the processing of your personal data in certain situations, such as if you deny the accuracy of your personal data.
Right to have personal data transferred from one system to another (Article 20, GDPR), where applies
You have the right to obtain the personal data you have given in a structured, commonly used and machine-readable format, and the right to transmit that data to another controller if possible, and if processing is automated.
Right to object (Article 21, GDPR) , where applies
You have the right to object to the processing of your personal data if processing is based on public or legitimate interest. As a result, the university cannot process your personal data unless it can prove that processing is based on a significantly important and justified reason which supersedes your rights.
Derogation from the rights of data subjects
Derogation from the aforementioned rights is possible in certain individual situations on the basis of the GDPR and the Finnish data protection act, insofar as the rights prevent scientific or historical research purposes or statistical purposes being fulfilled or make it much more difficult. The need for derogation must always be assessed separately in each situation.
Profiling and automated decision making
In this study, your personal data will not be used in automated decision making. In this study, the purpose of the processing of personal data is not to assess your personal characteristics, i.e. profiling. Instead, your personal data and characteristics will be assessed from the perspective of broader scientific research.
Executing the rights of data subjects
If you have any questions about the rights of data subjects, please contact the Juuriharja Consulting Group Ltd’s data protection officer. All requests related to the execution of rights must be sent to Runeberginkatu 61, 00260 Helsinki, Finland, puh. +358 50 530 8383, e-mail: rea.klingberg@juuriharja.fi. Käyntiosoite: Runeberginkatu 61, 00260 Helsinki, Finland. Visiting address: Runeberginkatu 61, 00260 Helsinki, Finland.
Any data breaches or suspicions of data breaches must be reported to e-mail: rea.klingberg@juuriharja.fi.
You have the right to file a complaint with the supervisory authority of your permanent place of residence or employment if you consider that the processing of personal data is in breach of the GDPR. In Finland, the supervisory authority is the Office of the Data Protection Ombudsman.
Contact for Office of the Data Protection Ombudsman: https://tietosuoja.fi/en/home